Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: qpB56gY7XHoOfDwrKD2SxffZUMGeAKh2cq1+G0HFObQ=
Subject key identifier: D7:E9:19:0E:54:F0:C1:8D:63:48:6A:CE:25:14:EE:7D:09:C8:E8:5D
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0197470B8F42025033AFC9F40C5CEF30CE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0189
Signing time: Fri 06 Jun 2025 21:00:29 +0000
Manifest this update: Fri 06 Jun 2025 21:00:29 +0000
Manifest next update: Sat 07 Jun 2025 21:00:29 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: kewJCdrq7UoI8POqWNJ7K8RCd1kKTjU1vDRBLG8V6YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8f:42:02:50:33:af:c9:f4:0c:5c:ef:30:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Jun 6 21:00:29 2025 GMT
Not After : Jun 7 21:00:29 2025 GMT
Subject: CN=d7e9190e54f0c18d63486ace2514ee7d09c8e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:54:06:b7:57:13:78:1d:11:27:fa:11:46:
65:c0:e3:6b:41:d4:5d:1b:77:84:c2:26:ec:1e:7a:
13:f0:33:3d:84:fd:5d:87:d0:62:fb:be:67:fa:ab:
28:18:2c:fb:6b:12:03:c3:55:e0:e2:76:21:c0:34:
60:f9:48:98:02:2c:e3:9c:eb:56:d1:7a:20:c6:78:
bc:23:cb:e0:ca:1f:f1:69:20:9e:69:c5:7e:94:77:
4b:8f:78:ed:7e:a8:4f:37:1d:36:12:11:3a:7a:19:
4a:64:18:df:13:da:19:f1:06:7f:c8:7a:02:0c:7e:
6b:3a:ad:32:c9:ff:75:0c:49:b2:56:f8:50:0d:02:
e6:d6:92:2c:62:e8:49:62:8a:60:e5:1f:90:02:7d:
ad:ce:aa:4c:76:59:35:af:44:7b:5a:41:ea:88:1c:
ac:db:3f:58:da:14:ef:c3:a4:41:6a:13:59:24:fe:
e8:99:41:2e:2b:4f:27:55:4d:01:c1:bb:d1:9a:7e:
7d:b6:56:22:35:85:24:0e:10:55:c5:16:1d:f5:6e:
55:33:7b:9a:23:f9:ae:57:4f:61:48:f0:1e:86:49:
af:09:24:a6:e0:55:76:74:0d:00:69:37:91:7e:79:
37:a9:42:2b:1f:04:66:3e:78:14:c6:27:60:ae:99:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:19:0E:54:F0:C1:8D:63:48:6A:CE:25:14:EE:7D:09:C8:E8:5D
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d4:16:38:77:8d:06:88:7b:f3:9e:fb:2a:ff:42:cf:40:bf:
3d:f8:39:46:e9:21:01:02:3b:65:ef:95:36:5f:32:dd:13:61:
9d:0a:a6:07:30:42:30:1a:69:47:87:25:88:60:26:49:05:0f:
63:63:9c:94:04:0e:1b:06:2f:23:2b:c5:42:13:14:06:f2:29:
f3:83:86:8c:4c:b0:72:0a:4b:57:71:24:66:86:72:56:ad:74:
1d:c8:d9:3e:db:30:75:a5:a9:a2:c1:c1:48:52:bd:9e:9d:4f:
b5:f4:2a:34:c8:f8:3f:58:97:51:f3:33:d5:02:d4:85:cb:a2:
6d:4d:63:d5:dc:c7:6f:b0:71:12:a6:34:d5:50:02:c4:16:f9:
16:7e:52:e3:53:b2:e5:96:86:33:e4:d1:58:32:f6:39:52:e2:
4f:31:ab:9e:7b:2c:13:86:46:e9:84:9e:f6:46:09:68:81:9d:
67:ec:3f:3b:57:4f:a6:c9:9e:4a:26:52:0f:13:13:6f:9c:ee:
96:12:2f:9f:38:ad:19:9a:1b:1c:11:09:8e:87:7f:58:16:8c:
50:8f:37:5c:2a:bb:69:ab:44:e3:35:0b:09:12:32:eb:d3:40:
44:36:6f:63:59:b2:2c:87:c8:47:b1:81:94:e4:a6:61:fe:f3:
9d:e5:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:23 2025 by rpki-client